Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative number of samples, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to arm-wt-22k/lib_src/eas_wtengine.c and arm-wt-22k/lib_src/eas_wtsynth.c, aka internal bug 26366256.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Android Mediaserver 远程代码执行漏洞
Vulnerability Description
Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。Mediaserver是其中的一个多媒体服务组件。 Android的Mediaserver中的Sonivox存在远程代码执行漏洞，该漏洞源于程序没有检查数量为负值的样本。远程攻击者可借助特制的媒体文件利用该漏洞造成拒绝服务（内存损坏）或执行任意代码。以下版本受到影响：Android 4.4.4之前版本，5.0.2之前版本，5.1.1之前版本，6.0之前版本和6.0.1之前版本。
CVSS Information
N/A
Vulnerability Type
N/A